Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/MLis4Ykeq134DtJNXq9CJl9fboI.roa
File: MLis4Ykeq134DtJNXq9CJl9fboI.roa (raw, json)
Hash identifier: eUp4Hgfo5Ah//leDvRhzGDMVb52xFarJLqKnvTIe10E=
Subject key identifier: 30:B8:AC:E1:89:1E:AB:5D:F8:0E:D2:4D:5E:AF:42:26:5F:5F:6E:82
Certificate issuer: /CN=e5f6806b7a051e7bbb7d6988e27d764369dab708
Certificate serial: 019F23688DECF22EE6EFEAAAEFBC26BFDA81
Authority key identifier: E5:F6:80:6B:7A:05:1E:7B:BB:7D:69:88:E2:7D:76:43:69:DA:B7:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5faAa3oFHnu7fWmI4n12Q2natwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/MLis4Ykeq134DtJNXq9CJl9fboI.roa
Signing time: Thu 02 Jul 2026 15:18:02 +0000
ROA not before: Thu 02 Jul 2026 15:18:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8823
IP address blocks: 193.47.149.0/24 maxlen: 24
2a10:1180::/31 maxlen: 31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/5faAa3oFHnu7fWmI4n12Q2natwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/5faAa3oFHnu7fWmI4n12Q2natwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5faAa3oFHnu7fWmI4n12Q2natwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:8d:ec:f2:2e:e6:ef:ea:aa:ef:bc:26:bf:da:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5f6806b7a051e7bbb7d6988e27d764369dab708
Validity
Not Before: Jul 2 15:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=30b8ace1891eab5df80ed24d5eaf42265f5f6e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a6:91:2d:9f:1a:0c:5a:33:11:7c:27:a9:21:
e1:e4:f1:f9:20:1c:ce:99:33:4e:66:7c:5f:88:79:
29:5c:37:23:5f:1f:39:f5:af:f4:40:c1:23:b3:4f:
9b:9d:14:0b:9f:2a:1e:a6:b4:0f:30:c3:f6:91:d4:
c2:f9:a7:0d:f5:ab:d4:2a:7c:f6:b8:53:db:5b:6f:
97:ba:e3:a5:07:37:d1:e1:93:4d:be:2f:90:9d:39:
3a:72:28:85:37:6b:92:58:7c:a5:52:e2:35:d8:cb:
61:1a:00:52:48:e8:a3:15:23:41:a1:bc:1e:66:e2:
5a:80:17:08:88:b4:f7:58:09:ec:ce:90:b1:16:ff:
64:60:de:0d:e9:bf:c1:b6:d1:51:eb:e1:74:f6:b1:
57:02:d7:d0:8c:b3:c9:89:0d:f2:45:5b:56:39:5e:
35:85:31:2a:7b:cc:95:db:3b:0a:a0:c6:24:0e:31:
f5:5c:f2:87:1b:28:f8:69:92:81:1a:ff:8f:d2:b5:
18:35:92:c4:c3:c1:82:8c:a9:ef:b6:0d:2e:36:7f:
61:eb:c5:c4:21:67:0e:d0:26:01:50:0e:27:d3:7d:
31:88:ea:41:0a:b3:77:e6:15:c5:05:71:4c:3d:35:
e5:df:e6:96:94:75:5e:46:0d:bc:f4:3e:65:39:38:
ea:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B8:AC:E1:89:1E:AB:5D:F8:0E:D2:4D:5E:AF:42:26:5F:5F:6E:82
X509v3 Authority Key Identifier:
keyid:E5:F6:80:6B:7A:05:1E:7B:BB:7D:69:88:E2:7D:76:43:69:DA:B7:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5faAa3oFHnu7fWmI4n12Q2natwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/MLis4Ykeq134DtJNXq9CJl9fboI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4edc36-4d53-47cf-a6fc-b51154628fb3/1/5faAa3oFHnu7fWmI4n12Q2natwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.149.0/24
IPv6:
2a10:1180::/31
Signature Algorithm: sha256WithRSAEncryption
73:24:89:5b:94:f0:c2:e0:9e:12:18:95:22:ae:61:5e:de:1c:
28:f6:a4:79:d4:16:6f:a2:21:f2:f3:57:4a:a7:46:d5:56:94:
1a:eb:0b:c1:56:ae:86:75:55:46:ce:71:ec:10:9b:4f:1f:43:
05:ce:7c:57:69:31:72:3e:f8:1f:45:84:4c:76:ec:7e:df:86:
a6:8e:5e:e2:21:6f:3f:0e:45:78:cc:a6:1d:6a:94:0f:35:8d:
0b:94:2a:9f:c2:43:62:2f:86:5d:03:e7:49:8b:6b:6e:a3:0c:
0c:a7:db:85:6b:e1:8b:a3:0e:66:27:2b:b3:5c:c1:11:d1:46:
5e:c4:ea:9e:f0:e3:4b:6f:46:bf:25:ae:98:66:17:76:af:df:
e5:ef:ba:3a:83:8a:4a:6a:fc:1f:29:a2:bd:b3:9c:02:06:ee:
45:d8:b0:2e:82:9a:6c:ef:6e:f8:0e:f4:79:f0:5b:75:c5:0d:
dc:e5:43:a4:b2:c6:cb:31:e4:62:2d:76:76:89:a0:66:46:89:
f3:aa:6c:82:82:0b:81:ee:d4:9c:ff:d3:54:55:53:3d:78:bc:
61:f0:2e:c6:1d:e4:8a:be:45:7b:4c:2f:c5:72:f7:50:86:61:
67:4f:af:b8:11:6b:9d:7e:cf:9b:8c:b9:f0:14:bd:56:23:67:
3a:87:7a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:29:15 2026 by rpki-client